Traffic Trace Info


DumpFile: 200612271400.dump
FileSize: 881.17MB
Id: 200612271400
StartTime: Wed Dec 27 14:00:00 2006
EndTime: Wed Dec 27 14:15:00 2006
TotalTime: 899.93 seconds
TotalCapSize: 688.54MB CapLen: 96 bytes
# of packets: 12621233 (9184.37MB)
AvgRate: 85.62Mbps stddev:8.90M

IP flow (unique src/dst pair) Information

# of flows: 420619 (avg. 30.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.8% 2.0% 1.9% 1.9% 1.4% 1.2% 1.1% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 228908
Top 10 bandwidth usage (bytes/total in %):
30.9% 10.1% 6.5% 3.9% 3.6% 2.8% 2.6% 2.1% 2.0% 1.9%
# of IPv6 addresses: 1290
Top 10 bandwidth usage (bytes/total in %):
44.1% 44.1% 12.5% 5.4% 5.3% 4.0% 4.0% 3.9% 3.9% 3.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2485979
 [   64-  127]:    3155906
 [  128-  255]:     329518
 [  256-  511]:     341839
 [  512- 1023]:     365947
 [ 1024- 2047]:    5942044


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         12621233 (100.00%)       9630507270 (100.00%)    763.04
 ip            12565008 ( 99.55%)       9611668488 ( 99.80%)    764.96
  tcp          10690631 ( 84.70%)       9310282446 ( 96.67%)    870.88
   http(s)      5518775 ( 43.73%)       7413327799 ( 76.98%)   1343.29
   http(c)      2638600 ( 20.91%)        381925105 (  3.97%)    144.75
   squid         243208 (  1.93%)        126966534 (  1.32%)    522.05
   smtp          290076 (  2.30%)         89518065 (  0.93%)    308.60
   nntp            8126 (  0.06%)          2766075 (  0.03%)    340.40
   ftp            92676 (  0.73%)        108255461 (  1.12%)   1168.11
   pop3            7873 (  0.06%)          3087478 (  0.03%)    392.16
   imap            4746 (  0.04%)          2366768 (  0.02%)    498.69
   telnet           727 (  0.01%)            87800 (  0.00%)    120.77
   ssh            25205 (  0.20%)          5590720 (  0.06%)    221.81
   dns             1622 (  0.01%)           111878 (  0.00%)     68.98
   bgp             1952 (  0.02%)           319069 (  0.00%)    163.46
   realaud        18872 (  0.15%)         17114679 (  0.18%)    906.88
   rtsp          182748 (  1.45%)        207277903 (  2.15%)   1134.23
   icecast          380 (  0.00%)           220261 (  0.00%)    579.63
   hotline           12 (  0.00%)             1264 (  0.00%)    105.33
   other        1655015 ( 13.11%)        951344507 (  9.88%)    574.83
  udp           1531016 ( 12.13%)        262948263 (  2.73%)    171.75
   dns          1087854 (  8.62%)        146414685 (  1.52%)    134.59
   rip                9 (  0.00%)              594 (  0.00%)     66.00
   realaud         5175 (  0.04%)          2616303 (  0.03%)    505.57
   halflif           16 (  0.00%)             1775 (  0.00%)    110.94
   starcra           14 (  0.00%)             2449 (  0.00%)    174.93
   everque           21 (  0.00%)             2355 (  0.00%)    112.14
   unreal             4 (  0.00%)              372 (  0.00%)     93.00
   quake             19 (  0.00%)             2561 (  0.00%)    134.79
   cuseeme            5 (  0.00%)              451 (  0.00%)     90.20
   other         437894 (  3.47%)        113903480 (  1.18%)    260.12
  icmp           320217 (  2.54%)         27718524 (  0.29%)     86.56
  ip6              6874 (  0.05%)          8024543 (  0.08%)   1167.38
  other           16270 (  0.13%)          2694712 (  0.03%)    165.62
  frag              206 (  0.00%)           155086 (  0.00%)    752.84
 ip6              56225 (  0.45%)         18838782 (  0.20%)    335.06
  tcp6             7292 (  0.06%)          1849449 (  0.02%)    253.63
   http(s)          683 (  0.01%)           879154 (  0.01%)   1287.19
   http(c)          194 (  0.00%)            30564 (  0.00%)    157.55
   squid              7 (  0.00%)              558 (  0.00%)     79.71
   smtp              96 (  0.00%)            17820 (  0.00%)    185.62
   ftp              906 (  0.01%)           108505 (  0.00%)    119.76
   ssh               15 (  0.00%)             1890 (  0.00%)    126.00
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              285 (  0.00%)            35243 (  0.00%)    123.66
   icecast            4 (  0.00%)              316 (  0.00%)     79.00
   other           5095 (  0.04%)           774764 (  0.01%)    152.06
  udp6            32870 (  0.26%)          6448894 (  0.07%)    196.19
   dns            31635 (  0.25%)          6312376 (  0.07%)    199.54
   other           1235 (  0.01%)           136518 (  0.00%)    110.54
  icmp6            8820 (  0.07%)          2494603 (  0.03%)    282.83
  ip6              1728 (  0.01%)           299951 (  0.00%)    173.58
  pim6               77 (  0.00%)             8844 (  0.00%)    114.86
  other6           5438 (  0.04%)          7737041 (  0.08%)   1422.77


tcpdump file: 200612271400.dump.gz (322.16 MB)